Which of the following are true regarding encrypted Amazon Elastic Block Store (EBS) volumes? Choose 2
answers

A company is deploying a new two-tier web application in AWS. The company has limited staff and requires
high availability, and the application requires complex queries and table joins. Which configuration provides
the solution for the company’s requirements?

A t2.medium EC2 instance type must be launched with what type of Amazon Machine Image (AMI)?

You manually launch a NAT AMI in a public subnet. The network is properly configured. Security groups and
network access control lists are property configured. Instances in a private subnet can access the NAT. The

NAT can access the Internet. However, private instances cannot access the Internet. What additional step is
required to allow access from the private instances?

Which of the following approaches provides the lowest cost for Amazon Elastic Block Store snapshots while
giving you the ability to fully restore data?

An existing application stores sensitive information on a non-boot Amazon EBS data volume attached to an
Amazon Elastic Compute Cloud instance. Which of the following approaches would protect the sensitive data
on an Amazon EBS volume?

A US-based company is expanding their web presence into Europe. The company wants to extend their AWS
infrastructure from Northern Virginia (us-east-1) into the Dublin (eu-west-1) region. Which of the following
options would enable an equivalent experience for users on both continents?

Which of the following are use cases for Amazon DynamoDB? Choose 3 answers

A customer implemented AWS Storage Gateway with a gateway-cached volume at their main office. An event
takes the link between the main and branch office offline. Which methods will enable the branch office to
access their data? Choose 3 answers

A company has configured and peered two VPCs: VPC-1 and VPC-2. VPC-1 contains only private subnets, and
VPC-2 contains only public subnets. The company uses a single AWS Direct Connect connection and private
virtual interface to connect their on-premises network with VPC-1. Which two methods increases the fault
tolerance of the connection to VPC-1? Choose 2 answers